Maxhub Pivot Client Application
Approved changes feed: RSS · Atom
cpe:2.3:a:maxhub:maxhub_pivot_client_application:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Maxhub (ed5c57ca-9254-5a2b-b76d-97682d527db8) |
|---|---|
| Product | Maxhub Pivot Client Application (279594c3-9fd7-50bf-8104-0416d3511fc3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6411 |
vulnerable | 2026-06-08 08:07:04.760855 |
MAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic Algorithm
HIGH (7.3)
This vulnerability, in the MAXHUB Pivot client application versions
prior to v1.36.2, may allow an attacker to obtain encrypted tenant email
addresses and related metadata from any tenant. Due to the presence of a
hardcoded AES key within the application, the encrypted data can be
decrypted, enabling access to tenant email addresses and associated
information in cleartext. Furthermore, an attacker may be able to cause a
denial-of-service condition by enrolling multiple unauthorized devices
into a tenant via MQTT, potentially disrupting tenant operations.
Published: 2026-05-07T22:25:54.959Z
Updated: 2026-05-08T13:06:12.227Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.